CVE-2022-4353 - LinZhaoguan pb-cms IpUtil.getIpAddr cross site scripting

Back Back to CVE browser

MEDIUM

LinZhaoguan pb-cms IpUtil.getIpAddr cross site scripting

Published Dec 8, 2022

5.4

MEDIUM

CVSS 3.1

EPSS 0.37%

Description

A vulnerability has been found in LinZhaoguan pb-cms 2.0 and classified as problematic. Affected by this vulnerability is the function IpUtil.getIpAddr. The manipulation leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-215113 was assigned to this vulnerability.

Affected products

Vendor LinZhaoguan Product PB-Cms Default
n/a
- Version
  2.0
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

LinZhaoguan

PB-Cms

n/a

Version	Status	Constraints
2.0	affected	-

Remediation

No remediation recorded yet.

Weaknesses (2)

CWE-707

CWE-79

Cross-site Scripting (XSS)

References (3)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-51704
Advisory
https://gitee.com/LinZhaoguan/pb-cms/issues/I52422
ExploitIssue TrackingThird Party Advisory
https://vuldb.com/?id.215113
Third Party Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-51704		Advisory
https://gitee.com/LinZhaoguan/pb-cms/issues/I52422		ExploitIssue TrackingThird Party Advisory
https://vuldb.com/?id.215113		Third Party Advisory